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IN THE CLAIMS 

Please amend claims 1, 5-7, 11 and 13-18 and add claims 19-22 as indicated below. 

This listing of claims will replace-all prior versions, and listings, of claims in the 
application. 

Listing of Claims: 

Claim 1 (currently amended) A method for initializing a first device distributed with 
an embedded radio module using [[a]] a server, said server having an embedded radio 
module, said method comprising the steps of: 

sending an inquiry from said server to said first device using said embedded 
radio modules; 

returning, from said first device, a unique device identifier of said first device, 
to said server; 

creating, at said server, a public key, private key pair for said first device; 

creating, at said server, a device certificate for said first device, said device 
certificate having a unique hardware identifier associated with said first device and a 
public key associated with said first device; 

transmitting said private key, and said device certificate, and a public key of a 
Certificate Authority which signed said device certificate, to said first device; and, 

storing said private key in non-removable protected storage at said first 

device. 

Claim 2 (original) A method as claimed in claim 1 wherein said protected storage is 
write-only storage able to perform computations involving previously- written data. 

Claim 3 (original) A method as claimed in claim 1 wherein a copy of said certificate 
is stored in an enterprise database. 
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Claim 4 (original) A method as claimed in claim 1 wherein a copy of said certificate 
is stored in an LDAP directory. 



Claim 5 (currently amended) A method for initializing a first device distributed with 
an embedded radio module using a server, said server having an embedded radio 
module, said method comprising the steps of: 

sending an inquiry from said server to said first device using said embedded 
radio modules; 

creating, at said first device, a public key, private key pair for said first device; 
storing, at said first device, said private key in non-removable protected 
storage; 

returning, from said first device, a unique device identifier and said public key 
of said first device, to said server; 

creating, at said server, a device certificate for said first device, said device 
certificate having said device identifier and said public key; and 

transmitting [[said]] said device certificate and a public key of a Certificate 
Authority which signed said device certificate to said first device. 

Claim 6 (currently amended) A method as claimed in claim [[6]] 5 wherein said 
protected storage is a write-only storage able to perform computations involving 
previously- written data. 

Claim 7 (currently amended) A system for initializing a first device distributed with 
an embedded radio module using [[a]] a server, said server having an embedded radio 
module, said system comprising: 

a communications mechanism for sending an inquiry from said server to said 
first device using said embedded radio modules, and returning, from said first device, 
a unique device identifier of said first device, to said server; 
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a processor at said server for creating a public key, private key pair for said 
first device; 

a device certificate, created at said server, for said first device, said device 
certificate having a unique hardware identifier associated with said first device and a 
public key associated with said first device; 

wherein said communications mechanism [[transmitts]] transmits said private 
key, and said device certificate, and a public key of a Certificate Authority which 
signed said device certificate, to said first device; and, said processor stores said 
private key in non-removable protected storage at said first device. 

Claim 8 (original) A system as claimed in claim 7 wherein said protected storage is 
write-only storage able to perform computations involving previously- written data. 

Claim 9 (original) A system as claimed in claim 7 wherein a copy of said certificate 
is stored in an enterprise database. 

Claim 10 (original) A system as claimed in claim 7 wherein a copy of said certificate 
is stored in an LDAP directory. 

Claim 11 (currently amended) An initialization system, said system comprising: 

a first device, said first device having an embedded radio module; 

a server, said server having an embedded radio module; 

a communications mechanism, said communications mechanism sending an 
inquiry from said server to said first device using said embedded radio modules; 

wherein said first device creates a public key, private key pair for said first 
device, stores said private key in non-removable protected storage, and returns a 
unique device identifier and said public key of said first device, to said server; 
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said server creates a device certificate for said first device, said device 
certificate having said device identifier and said public key; and [[transmitts]] 
transmits [[said]] said device certificate and a public key of a Certificate Authority 
which signed said device certificate to said first device. 

Claim 12 (original) A system as claimed in claim 1 1 wherein said protected storage is 
a write-only storage able to perform computations involving previously- written data. 

Claim 13 (currently amended) A computer program product embodied in a machine 
readable medium for initializing a first device distributed with an embedded radio 
module using [[a]] a server, said server having an embedded radio module, wherein 
said computer program product m e thod comprising comprises the programming steps 
of: 

comput e r program cod e m e ans of sending an inquiry from said server to said 
first device using said embedded radio modules; 

comput e r program cod e m e ans of returning, from said first device, a unique 
device identifier of said first device, to said server; 

comput e r program cod e m e ans of creating, at said server, a public key, private 
key pair for said first device; 

comput e r program cod e m e ans of creating, at said server, a device certificate 
for said first device, said device certificate having a unique hardware identifier 
associated with said first device and a public key associated with said first device; 

comput e r program code m e ans of transmitting said private key, and said 
device certificate, and a public key of a Certificate Authority which signed said 
device certificate, to said first device; and, 

comput e r program cod e m e ans of storing said private key in non-removable 
protected storage at said first device. 
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Claim 14 (currently amended) A program The computer program product as claimed 
in claim 13 wherein said protected storage is write-only storage able to perform 
computations involving previously-written data. 

Claim 1 5 (currently amended) A program The computer program product as claimed 
in claim 13 wherein a copy of said certificate is stored in an enterprise database. 

Claim 16 (currently amended) A program The computer program product as claimed 
in claim 13 wherein a copy of said certificate is stored in an LDAP directory. 

Claim 17 (currently amended) A computer program product embodied in a machine 
readable medium for initializing a first device distributed with an embedded radio 
module using a server, said server having an embedded radio module, wherein said 
computer program product m e thod comprising comprises the programming steps of : 

comput e r program cod e m e ans of sending an inquiry from said server to said 
first device using said embedded radio modules; 

comput e r program cod e m e ans of creating, at said first device, a public key, 
private key pair for said first device; 

comput e r program cod e m e ans of storing, at said first device, said private key 
in non-removable protected storage; 

comput e r program cod e m e ans for returning, from said first device, a unique 
device identifier and said public key of said first device, to said server; 

comput e r program cod e m e ans of creating, at said server, a device certificate 
for said first device, said device certificate having said device identifier and said 
public key; and 

transmitting [[said]] said device certificate and a public key of a Certificate 
Authority which signed said device certificate to said first device. 
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Claim 18 (currently amended) A program The computer program product as claimed 
in claim 17 wherein said protected storage is a write-only storage able to perform 
computations involving previously- written data. 

Claim 19 (new) The method as recited in claim 1, wherein communication between 
said first device and said server is performed in a wireless manner. 

Claim 20 (new) The system as recited in claim 7, wherein communication between 
said first device and said server is performed in a wireless manner. 



Claim 21 (new) The computer program product as recited in claim 13, wherein 
communication between said first device and said server is performed in a wireless 
manner. 



Claim 22 (new) The computer program product as recited in claim 17, wherein 
communication between said first device and said server is performed in a wireless 
manner. 
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